-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 El 2005-08-22 a las 12:25 +0200, jesus antonio martinez pedrero escribió:
Bueno el caso es que tengo un pequeño problema que no se por donde meterlle mano. Al arranque de mi maquina, le tengo peusto en modo verbose, para ver todo lo que ocurre en el arranque, el caso es que cuando llega la hora de arrancar el firewall, todo se arranca bien, pero luego en la siguiente linea me muestra esto.
warning: Extended ipv6 suport disabled
El mensaje completo es: SuSEfirewall2: Warning: ip6tables does not support state matching. Extended IPv6 support disabled.
y tengo todos los servicios de ipv6 desactivados, no se pero creo que es mejor tener activado ipv6 para el tema de gestion de las ips en internet, no!! si estoy equivocado que alguien me corrija.
Esto es lo que dice el mantenedor del SuSEfirewall2 al respecto: |Date: Wed, 1 Jun 2005 10:56:13 +0200 |From: Ludwig Nussel |Subject: Re: [suse-security] Why has IPv6 support worsend in SUSE 9.3 | ... | | Unfortunately the netfilter code changed a lot between the 9.2 and 9.3 | kernel and stateful IPv6 filtering is not in mainline. The effort of | porting the patches for stateful IPv6 was considered too high for 9.3. | If you need stateful IPv6 you better stick with 9.2 and skip 9.3 :-( Y (recortado): |Date: Thu, 3 Mar 2005 13:24:34 +0100 |From: Ludwig Nussel |Subject: Re: [suse-security] Enable IPv6 support for SuSEfirewall2 | ... | | | SuSEfirwewall2 is supposed to automatically detect whether IPv6 support | is available if FW_IPv6 is empty (which is the default). Does that not | work for you? Did you maybe update from some older version and therefore | have old comments in /etc/sysconfig/SuSEfirewall2? | ... | | You can find SuSEfirewall2 beta versions in people/lnussel on the ftp | server btw. I changed the way interfaces are detected so v6-only | interfaces should work as well now. Feedback welcome. A efectos prácticos, no importa si activas/desactivas ipv6, no se usa - salvo en la intranet, que algunas cosas si parece que funcionen de preferencia en ipv6. El ssh, postfix... Aug 22 13:30:20 nimrodel sshd[18990]: Accepted keyboard-interactive/pam for fido from ::ffff:127.0.0.1 port 4672 ssh2 Sin embargo: cer@nimrodel:~> ping "::1" ping: unknown host ::1 y en cambio: cer@nimrodel:~> ssh "::1" conecta: Aug 22 13:36:17 nimrodel sshd[19414]: Accepted publickey for cer from ::1 port 1025 ssh2 Luego ni siquiera todos los programas de linux están al tanto. - -- Saludos Carlos Robinson -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFDCboatTMYHG2NR9URAoJmAJ0YOmw+YQWDVgr4CYyHvLGPUkniKQCgg36A f4YVRyDTYmLlwVfxqaW+Y0g= =vkwJ -----END PGP SIGNATURE-----